Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fa3fd134-77a8-339f-9894-22581fd6ac53.roa
File: fa3fd134-77a8-339f-9894-22581fd6ac53.roa (raw, json)
Hash identifier: O/u2vKUZbo71NQqckwG4i4Rho1n8Wkyfn2e0dovbzOc=
Subject key identifier: 29:11:67:E9:36:DB:9D:CE:34:B3:CE:EA:D0:23:B9:43:60:B6:48:4A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840948F4893CD4380C9EABFF080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fa3fd134-77a8-339f-9894-22581fd6ac53.roa
Signing time: Sat 14 Jan 2023 12:00:00 +0000
ROA not before: Sat 14 Jan 2023 12:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.52.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:94:8f:48:93:cd:43:80:c9:ea:bf:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 12:00:00 2023 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=15a3276b-21c7-444b-b6e8-ef735d2fcb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:f9:07:4f:db:c6:c1:42:7c:4f:27:82:c0:
be:5e:1d:4d:92:6d:4e:af:7e:0c:c5:fe:0e:c2:2c:
ff:cf:d5:b3:60:c2:b7:1a:bb:cc:cb:fe:1d:3e:f9:
ed:63:de:e1:43:2b:e6:94:1e:69:f0:aa:93:62:25:
4c:9d:d4:ec:b9:91:9e:77:68:70:40:f9:99:cf:a4:
d9:66:10:22:35:4a:84:e5:f8:e3:4f:01:70:31:0a:
ab:e6:91:83:48:67:28:1f:d8:4a:38:ae:3e:49:18:
61:3c:38:2a:8f:bc:d9:70:96:2b:ec:3a:1e:8e:8d:
34:fd:b7:a4:38:36:a8:8f:2d:e4:b4:05:a7:bf:2e:
41:7b:bd:fd:ad:3c:7d:e4:2a:ba:83:85:6e:a8:31:
05:9f:20:13:09:16:ea:cc:28:61:52:44:eb:44:cc:
d5:5c:d8:eb:43:c8:6c:71:d8:a6:ee:a7:db:a4:b9:
ee:5d:1d:0a:25:05:15:75:d1:78:d1:85:36:6d:fa:
12:12:3e:cb:b1:21:33:46:0a:ac:8d:18:82:ee:51:
97:dd:35:58:0f:33:e1:5a:c3:07:02:27:03:da:23:
64:21:f7:a1:5e:d9:63:3d:a7:8b:a2:dc:06:d9:a3:
e3:59:c5:60:48:78:06:99:61:01:4e:86:80:d7:a0:
ea:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:11:67:E9:36:DB:9D:CE:34:B3:CE:EA:D0:23:B9:43:60:B6:48:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fa3fd134-77a8-339f-9894-22581fd6ac53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.52.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:e0:e1:05:2b:59:e4:6f:fa:65:50:13:47:db:df:60:fd:d8:
13:aa:75:49:fe:74:e3:c1:99:ce:65:ea:7b:dc:fb:50:57:ea:
cc:5e:29:7a:17:02:e9:e9:ad:64:8e:ac:ba:1b:02:b0:e4:8a:
73:98:a1:ea:f8:a4:4a:c4:6a:0e:2f:d4:19:2b:32:db:4f:d0:
c5:4a:eb:a1:e2:5a:94:70:fb:de:db:d2:25:c2:7f:b9:50:85:
ec:10:a4:99:77:07:85:ef:44:07:30:80:84:5a:2e:2a:3d:18:
be:1a:6a:5b:cd:c9:3d:2e:f1:6c:58:4b:42:22:2d:15:e7:57:
46:98:0c:d1:a4:75:88:b1:57:cb:d8:f1:ec:a1:45:47:aa:69:
ac:21:f9:f6:64:a9:8d:54:5b:a7:28:5f:95:11:14:40:31:e8:
53:ae:aa:ca:c5:1c:a7:09:60:78:fc:e5:b2:77:f4:4f:29:fa:
f5:18:5d:45:06:74:b0:db:d4:57:a9:cc:77:b5:43:60:fa:48:
8f:51:6e:12:79:f4:95:86:04:34:0b:5e:d8:1f:77:75:b0:1e:
fd:7c:e7:8b:1b:d3:b6:2e:6e:64:2d:f6:b6:9c:d0:51:99:fe:
9b:c3:fb:c7:00:a6:03:30:b2:c3:98:9a:75:69:4d:65:da:f8:
32:c3:fd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:35:26 2025 by rpki-client